Researchers
Back
David Glick
#14162
of 60,399
22.5
Total CVSS
Vulnerabilities
·
3
Medium
2
High
1
PT-2014-2335
2014-11-03
6.9
CVE-2012-5508
Plone
Plone
The issue allows remote attackers to obtain random numbers and derive the PRNG state for password resets. This could potentially be used to gain unauthorized access.
PT-2014-2318
2014-09-30
6.9
CVE-2012-5491
Zope
Plone
The issue allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id. This is possible due to the way `z3c.form` is used in Plone.
PT-2014-2313
2014-09-16
8.7
CVE-2012-5486
Plone
Plone
The issue allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character in the ZPublisher.HTTPRequest. scrubHeader function.